Contacts backup app: what to look for before you trust one

A contacts backup app holds a copy of the people you depend on, so it deserves more scrutiny than a game or a photo filter. Before you install one, it helps to know what a good backup actually does and which questions reveal a weak one. This guide gives you a checklist you can apply to any option, including the ones already built into your phone.

Short answer: Judge a contacts backup app by eight things: what it saves, where the copy lives, how it is protected, whether you can preview a restore, whether you can export to a standard format, which permissions it asks for, how it is paid for, and what its privacy policy says. iCloud or Google sync plus a VCF file you keep yourself already covers most people. An app is worth adding when it passes the same checklist and saves something the built-in options do not.

Start with what you already have

Most phones already sync contacts to an account. On iPhone that is usually iCloud; on Android it is usually Google. Sync is not the same as a backup, but both services keep some history:

• iCloud archives earlier versions of your contacts. On iCloud.com, Data Recovery lets you restore one of those versions, listed by date and time. Apple notes that your current version is archived first, so you can go back to it. Details are on Apple's iCloud.com restore page.
• Google Contacts keeps deleted contacts in Trash for 30 days, and lets you undo all changes made in the past 30 days at once. See Google's help page on editing and deleting contacts.

These are strong safety nets, and they cost nothing. Their limits are worth knowing: a mistake syncs to every device, history windows are limited, and both live inside one account. If you are unsure which account your contacts are in, read where iPhone contacts are stored first.

The third built-in option is a file: a VCF (vCard) export you keep outside the phone. A file does not change when the account changes, which is exactly why it complements sync. Our guide to VCF or CSV explains which format to keep.

The checklist: eight questions for any contacts backup app

1. What exactly gets backed up?

Names and numbers are the easy part. Check the rest: several numbers and emails per person, their labels (Home, Work, Mobile), addresses, birthdays, company, notes and photos. Ask the app to make a test backup, then open the file and look at one complicated contact. If something is missing, the app should say so, not report a vague "done".

2. Where does the copy live?

There are three common answers: on the phone only, in a file you choose where to keep, or on the app maker's server. A copy on the same phone does not help when the phone is lost. A copy on a server means a third party holds your address book, which also contains other people's details. A file you send to your own email, computer or drive keeps you in control.

3. Is it protected?

A plain VCF file is readable by anyone who opens it. That is fine for a file you store carefully, but a backup that also holds notes or private details should be encrypted and password protected. Be wary of any app that cannot explain how its backup is protected in plain language.

4. Can you restore, and see what will change first?

Saving is half the job. Check how restore works before you need it. A good restore shows a preview, tells you what will be added or changed, and does not silently overwrite a contact you edited since the backup. Restore should never need a payment.

5. Can you leave with your data?

Look for export to a standard format, mainly VCF, which almost every phone and email service can read. A backup only the same app can open ties you to that app. You should also be able to delete everything you stored with it.

6. Which permissions does it ask for?

A contacts backup app needs access to contacts. It does not need your location, microphone or call history to make a file. If it asks for more, find out why. Also check whether it lets you choose which contacts to include, or takes the whole address book by default.

7. How is it paid for?

Free can mean ads, a trial that locks restore later, a contact limit, or data as the product. A clear pricing page should show what is free and what is paid. Our guide to a free contacts backup app covers the hidden costs of "free" in more detail.

8. What does the privacy policy say?

Read the parts about contacts specifically. Does the app upload them? Share them? Use them for caller ID lookups for other users? A clear "no" to each is what you want. The post on what a contacts app should never do lists the red flags.

The built-in options against the checklist

None of these is wrong. The point is to know which risk each one covers. Step-by-step help for each is in our guides to restoring contacts from iCloud and restoring contacts from Google.

Where Callmory fits

Callmory is an iPhone app; the beta opens in stages through the waitlist, and Android comes later. Here is how it answers the same eight questions, with the status shown on the site.

1. What is saved. A contacts backup is a portable VCF or CSV file. An app backup is one encrypted, password-protected file with your people, notes, follow-ups and the actual voice recordings. Callmory shows what each file includes before you save or restore it. Keeping original Home/Work/Mobile labels, addresses, birthdays and photos intact is in progress, so check a test file if those fields matter to you.
2. Where it lives. You pick contacts from your phone or from Callmory and send the file to Mail, Files or any app you choose. No account is needed for file backups, and nothing is uploaded silently.
3. Protection. The app backup is encrypted and password protected. The private space has its own separate encrypted backup; the private space is built and in security review, and opens to everyone only after device tests and an independent review.
4. Restore. Restoring a Callmory backup into Callmory shows a preview first and never silently overwrites a record that changed. Restoring back into your phone's own contacts with your approval is in progress.
5. Leaving. Exporting everything (VCF plus a full JSON backup) and permanently deleting all data are free; the support page shows where they are.
6. Permissions. You choose which contacts to bring in. Showing which accounts your contacts live in, and what Callmory can reach, is in progress. Callmory does not claim to have backed up data it could not reach.
7. Price. The core is free with no card, no ads and no time limit. Pro, planned at $9.99 per month for cloud space, seeing and searching copied data on the web and your other devices, a monthly AI allowance and unlimited saved views, is not on sale yet. If Pro ends, nothing is deleted. See pricing.
8. Privacy. Callmory never uploads your address book in the background and has no shared caller-ID database. The privacy policy has the details.

What it adds compared with sync or a plain VCF: your notes, follow-ups and voice recordings about people go into the same encrypted backup. If you only need contact fields, the built-in options plus a VCF file may be all you need.

A simple routine, whatever you choose

1. Keep sync on for the account your contacts live in.
2. Once a month, export a VCF and store it outside the phone.
3. Open the file and check a contact with several numbers and a note.
4. If you keep notes about people in an app, back those up too, preferably encrypted. Our guide to an encrypted contacts backup explains how.
5. Before a phone switch or a big clean-up, make a fresh copy.

Frequently asked questions